Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More

Post by munsters » Thu, May 07, 2020, 4:14 AM UTC

g_p wrote: post #45

Perhaps this outage will raise awarenesses more broadly as to the prevalence of "non essential" third party SDKs like these, and the risk that their failure can significantly impact on the wider ecosystem. I can't imagine Apple will be all too pleased by this. Perhaps time for them to look at clamping down on SDKs that make remote network requests? (Given they have their own private sign in system now as well, they m…

Post by Nicksil » Thu, May 07, 2020, 4:18 AM UTC

bitcrazy wrote: post #188

Nicksil wrote: post #174

Earlier quoted context omitted.

>For the average user out there, the fact is, most people only care about privacy when there's a breach/outage/scandal of some kind. Otherwise, the average person is not going to have "zomg fb is spyware" on their mind. Because they don't know . Like every industry, there are practices involved to which the layman is oblivious. It is important to remind ourselves that the reason the majority of users aren't vocalizin…

The 'not knowing' part happens when the outrage is then transferred to any app which does integrate the FB SDK (like zoom). We as developers have sortof taken for granted that the FB/Google/etc SDKs can do no evil. Maybe that attitude should change, because public opinion certainly has.

Post by cycomanic » Thu, May 07, 2020, 4:21 AM UTC

opportune wrote: post #164

millstone wrote: post #153

Earlier quoted context omitted.

What is this fresh hell? If you buy a spatula on Amazon, would you accept "client-side analytics" on what you cook because "it's basically the only way to monitor it?" Or would you say that your spatula usage is nobody's business? I love and happily pay for Spotify, but it is eye-opening that they send any data to Facebook. Well, shit.

If my spatula had as many failure modes as software, I would find it reasonable, sure.

Post by petre » Thu, May 07, 2020, 4:22 AM UTC

Barrin92 wrote: post #203

marmada wrote: post #165

Earlier quoted context omitted.

I feel like I'm in the minority here -- but I don't understand the problem. Software developers want to know whether their existing marketing methods are effective. The FB SDK helps with this. You always have the choice to not install the app (if you don't want to). This also helps developers make sure their marketing is effective and reaching the right people, which seems like a win-win to me.

>The FB SDK helps with this. You always have the choice to not install the app (if you don't want to). up until now I wasn't even aware of the facebook sdk or that say, spotify is sharing my data with facebook even if I don't use their login option so it's pretty hard to make a informed decision. Is this even legal under GDPR?

Post by anon102010 » Thu, May 07, 2020, 4:23 AM UTC

Nicksil wrote: post #52

yllus wrote: post #36

For those wondering why the Facebook SDK is so widely used in popular mobile apps: Facebook Login is actually in the minority of reasons to add the Facebook SDK to your mobile app. The vast majority of apps will add the Facebook SDK because it contains Facebook App Ads; a library that "completes the circle" in terms of finding out how effectively the ads you ran on Facebook were at getting people to download, install…

>Is that "spyware"? Yes, absolutely. It uses energy and bandwidth I paid for to surreptitiously transmit my information for use which will solely benefit Facebook and the software developer.